{"title":"将 DNS 更新时序与 TTL 值解耦","authors":"Yehuda Afek, Ariel Litmanovich","doi":"arxiv-2409.10207","DOIUrl":null,"url":null,"abstract":"A relatively simple safety-belt mechanism for improving DNS system\navailability and efficiency is proposed here. While it may seem ambitious, a\ncareful examination shows it is both feasible and beneficial for the DNS\nsystem. The mechanism called \"DNS Real-time Update\" (DNSRU), a service that\nfacilitates real-time and secure updates of cached domain records in DNS\nresolvers worldwide, even before the expiration of the corresponding Time To\nLive (TTL) values. This service allows Internet domain owners to quickly\nrectify any erroneous global IP address distribution, even if a long TTL value\nis associated with it. By addressing this critical DNS high availability issue,\nDNSRU eliminates the need for short TTL values and their associated drawbacks.\nTherefore, DNSRU DNSRU reduces the traffic load on authoritative servers while\nenhancing the system's fault tolerance. In this paper we show that our DNSRU\ndesign is backward compatible, supports gradual deployment, secure, efficient,\nand feasible.","PeriodicalId":501280,"journal":{"name":"arXiv - CS - Networking and Internet Architecture","volume":null,"pages":null},"PeriodicalIF":0.0000,"publicationDate":"2024-09-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Decoupling DNS Update Timing from TTL Values\",\"authors\":\"Yehuda Afek, Ariel Litmanovich\",\"doi\":\"arxiv-2409.10207\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"A relatively simple safety-belt mechanism for improving DNS system\\navailability and efficiency is proposed here. While it may seem ambitious, a\\ncareful examination shows it is both feasible and beneficial for the DNS\\nsystem. The mechanism called \\\"DNS Real-time Update\\\" (DNSRU), a service that\\nfacilitates real-time and secure updates of cached domain records in DNS\\nresolvers worldwide, even before the expiration of the corresponding Time To\\nLive (TTL) values. This service allows Internet domain owners to quickly\\nrectify any erroneous global IP address distribution, even if a long TTL value\\nis associated with it. By addressing this critical DNS high availability issue,\\nDNSRU eliminates the need for short TTL values and their associated drawbacks.\\nTherefore, DNSRU DNSRU reduces the traffic load on authoritative servers while\\nenhancing the system's fault tolerance. In this paper we show that our DNSRU\\ndesign is backward compatible, supports gradual deployment, secure, efficient,\\nand feasible.\",\"PeriodicalId\":501280,\"journal\":{\"name\":\"arXiv - CS - Networking and Internet Architecture\",\"volume\":null,\"pages\":null},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2024-09-16\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"arXiv - CS - Networking and Internet Architecture\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/arxiv-2409.10207\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"arXiv - CS - Networking and Internet Architecture","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/arxiv-2409.10207","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
摘要
本文提出了一种相对简单的安全带机制,用于提高 DNS 系统的可用性和效率。虽然它看似雄心勃勃,但仔细研究后发现,它对 DNS 系统来说既可行又有益。这种机制被称为 "DNS 实时更新"(DNSRU),它是一种服务,可对全球 DNS 解析器中的缓存域名记录进行实时、安全的更新,甚至在相应的 "有效时间"(TTL)值到期之前进行更新。这项服务允许互联网域名所有者快速纠正任何错误的全球 IP 地址分配,即使与之相关的 TTL 值很长。通过解决这一关键的 DNS 高可用性问题,DNSRU 消除了对短 TTL 值及其相关缺点的需求。本文表明,我们的 DNSRU 设计向后兼容、支持逐步部署、安全、高效且可行。
A relatively simple safety-belt mechanism for improving DNS system
availability and efficiency is proposed here. While it may seem ambitious, a
careful examination shows it is both feasible and beneficial for the DNS
system. The mechanism called "DNS Real-time Update" (DNSRU), a service that
facilitates real-time and secure updates of cached domain records in DNS
resolvers worldwide, even before the expiration of the corresponding Time To
Live (TTL) values. This service allows Internet domain owners to quickly
rectify any erroneous global IP address distribution, even if a long TTL value
is associated with it. By addressing this critical DNS high availability issue,
DNSRU eliminates the need for short TTL values and their associated drawbacks.
Therefore, DNSRU DNSRU reduces the traffic load on authoritative servers while
enhancing the system's fault tolerance. In this paper we show that our DNSRU
design is backward compatible, supports gradual deployment, secure, efficient,
and feasible.